Verify native profile runtime behavior

internal/framework/llm/runtime_inspection_test.go

@@ -113,6 +113,33 @@ func TestOfflineProfileAssemblyAndSafeViews(t *testing.T) {
 	}
 }
 
+func TestSafeViewsOmitProviderAndPromptValues(t *testing.T) {
+	const providerValue = "private-provider-value"
+	const promptValue = "private-operator-prompt-text"
+	runtime, _, dir := adapterFixtureWithDocuments(t, nil, 0, 0, nil, "offline", map[string]string{
+		"definitions.yaml":     "profiles:\n  base:\n    backend: offline\n    model: full-model\n    extra_params:\n      vendor_extension: " + providerValue + "\n",
+		"operator-prompt.yaml": operatorPromptDocument(promptValue, promptValue),
+	})
+	profiles, err := runtime.SelectedProfilesYAML()
+	if err != nil {
+		t.Fatal(err)
+	}
+	loaded, err := config.Load(ck.File(filepath.Join(dir, "config.yml")), "")
+	if err != nil {
+		t.Fatal(err)
+	}
+	explain, err := ExplanationYAML(loaded)
+	if err != nil {
+		t.Fatal(err)
+	}
+	combined := string(profiles) + string(explain)
+	for _, value := range []string{providerValue, promptValue, "adapter-secret", "127.0.0.1"} {
+		if strings.Contains(combined, value) {
+			t.Fatalf("safe views exposed %q: %s", value, combined)
+		}
+	}
+}
+
 func TestExplanationYAMLIncludesSafeInheritanceEvidence(t *testing.T) {
 	t.Setenv("SYNTHETIC_KEY", "synthetic-inherited-secret-never-print")
 	text := `version: 2